Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/387afd4f-041d-363d-864a-92472a705686.roa
File:                     387afd4f-041d-363d-864a-92472a705686.roa (raw, json)
Hash identifier:          /qoye3256GH5Jy9C3dSaOdP4uBp8h2Da/Fc/hD+MyyA=
Subject key identifier:   E0:DB:E0:65:D8:51:E1:6D:8A:DB:0A:BE:BE:C6:FF:9C:4D:BD:23:47
Certificate issuer:       /CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
Certificate serial:       010D0C9F4328584DC5659D3CD8FB85887F6DC680
Authority key identifier: 02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/387afd4f-041d-363d-864a-92472a705686.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     11068
IP address blocks:        192.200.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:9d:3c:d8:fb:85:88:7f:6d:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=e35ca966-bb9a-47c6-86cb-6b6ffa194a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d0:5f:99:69:d1:c7:86:ca:93:6c:3e:92:6b:
                    da:c8:9b:1d:86:ae:6a:6f:cc:68:8f:d9:d4:7e:14:
                    a9:98:85:82:7e:78:eb:f3:92:3f:af:6e:62:2d:dc:
                    be:86:87:6b:d0:4c:ff:23:71:0f:b0:f7:fe:a4:4e:
                    84:ae:01:32:e8:4e:ec:fc:27:78:f1:ea:d4:8a:f4:
                    5f:d1:83:aa:a1:76:43:57:f8:a2:93:52:b9:2e:22:
                    45:cb:e8:10:7b:ab:71:a4:04:68:e7:fc:c9:a6:5f:
                    c3:cd:80:7b:b5:32:2c:97:f6:47:c4:05:c0:54:2f:
                    fb:2e:15:cc:58:f7:b5:7b:e4:0b:02:18:de:07:88:
                    61:e2:11:39:07:19:c3:23:5a:44:85:e4:87:7e:7b:
                    e5:c8:86:f4:a2:29:e6:70:5b:7b:82:f4:23:aa:af:
                    9f:f4:6a:a1:d3:d6:a7:38:4d:3c:e0:72:31:6e:40:
                    3f:d5:b5:13:c4:05:99:01:08:5a:48:b1:b8:f1:59:
                    fa:d5:b8:3c:f0:3c:e5:c8:bc:28:56:85:50:c1:a4:
                    62:f3:f3:5d:5d:9b:ae:e5:52:78:4a:fe:af:d7:0e:
                    eb:ff:c2:b8:1b:9a:66:b6:0d:6a:cc:68:2c:12:93:
                    6a:23:dc:54:bd:73:08:66:5f:d6:42:ec:db:71:b2:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DB:E0:65:D8:51:E1:6D:8A:DB:0A:BE:BE:C6:FF:9C:4D:BD:23:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/387afd4f-041d-363d-864a-92472a705686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl

            X509v3 Authority Key Identifier:
                keyid:02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c5:d4:2e:b4:b4:13:9c:ad:d4:1d:a3:3b:9e:d2:11:e0:53:
         1c:a7:7b:c3:2a:d8:2b:b3:cf:68:8e:da:71:b5:e2:1f:b0:62:
         19:5b:00:dd:4a:bb:7c:57:29:4c:a5:e0:db:37:e8:30:5e:2e:
         f3:9e:f5:99:bf:44:80:98:f1:98:bd:47:dd:32:b6:71:73:01:
         10:b1:0d:d2:05:d7:8a:ab:02:cd:21:06:7b:a8:d9:26:ea:90:
         55:bb:17:a3:76:3f:85:fe:a9:60:69:b1:46:c3:13:42:41:d1:
         ef:c4:9f:fa:c6:00:ed:20:a4:35:ec:02:75:8a:e5:ae:62:67:
         2c:24:2e:d1:75:ef:42:05:76:3d:88:58:11:e9:f2:88:0b:9e:
         84:bf:e7:04:71:45:1c:1f:ea:e0:ea:ea:cb:2a:31:33:26:bd:
         d9:9f:49:48:ce:2f:62:0f:0b:8c:65:60:b4:48:13:6c:40:e3:
         6f:25:13:63:d2:63:2e:be:1e:92:3f:32:3b:26:38:ae:cf:b9:
         5c:cf:98:3b:05:ea:87:85:c9:5e:c9:23:35:27:e2:66:0b:0d:
         d7:1d:88:ae:37:12:3b:66:b2:ee:22:e5:a4:26:9e:4d:73:62:
         a4:1e:10:fc:8b:21:13:50:f4:15:55:da:e3:52:24:2d:12:ee:
         88:d7:ae:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:10 2026 by rpki-client